Jan Windows update issues - Resizing recovery partition

[TwistedHelixis]

Not really sure which forum to put this in, as it seems to be an issue for lots of servers and clients.

 

MS released a security update in Jan that would fail due to the Windows recovery partition not being large enough for the update.

 

I blocked the update until I could see if MS were going to fix the issue, but it now seems like MS are just going to deploy this update as part of the monthly CU updates in Feb.

 

I have just done some testing and managed to resize the recovery partition on a test 2022 server, using cmd diskpart, but I don't really want to have do do that on production systems.

 

Just wondering how many of you have,

Already come across this issue and have you already increased the recovery partition size? or are you waiting to see what happens in Feb updates?

[free780]

If you are not using Bitlocker on the server/client there isn’t a risk.

 

The vulnerability requires physically access.

 

If it’s only clients that are using bitlocker. Then I would be tempted to wait to get them upgraded to win11 and do the resizing then.

 

I did a script for clients and some servers that aren’t using WSUS/MECM.

 

The fact that MS didn’t push to WSUS says something about the confidence of the patch.

 

I’m going to see what patch Wednesday brings.

[TwistedHelixis]

If you are not using Bitlocker on the server/client there isn’t a risk.

But having the update rolled into February CU updates, means the entire CU update could fail.

 

If it’s only clients that are using bitlocker. Then I would be tempted to wait to get them upgraded to win11 and do the resizing then.

Again, this wouldn't be an issue if its not part of the next CU update.

 

Lets see what happens next week :-)

[free780]

But having the update rolled into February CU updates, means the entire CU update could fail.

 

 

Again, this wouldn't be an issue if its not part of the next CU update.

 

Lets see what happens next week :-)

 

I believe for Windows 11 22H2+ the patch was wrapped up in the January CU. If I can parse the Microsoft speak.

 

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20666#

[TwistedHelixis]

Feb updates.

 

https://www.reddit.com/r/sysadmin/s/DoJ2F3MwUn